906554 - Get "Permission denied (publickey)" when pushing to try

Status: RESOLVED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Henry Chang [:hchang]]

Attachment: output of "ssh -vvv hg.mozilla.org"

I got an error message when pushing to try server: "Permission denied (publickey)". I tried "ssh -vvv hg.mozilla.org" but ended up with the same error. Please find the error log and my ~/.ssh/config in the attachments. Thanks.

Comment 1

[Henry Chang [:hchang]]

Attachment: ~/.ssh/config

Comment 2

[Henry Chang [:hchang]]

This is the resolved bug in which I got the level 1 commit access:
https://bugzilla.mozilla.org/show_bug.cgi?id=896950

Comment 3

[Ashish Vijayaram [:ashish]]

Oddly your key was missing in LDAP. I've gone ahead and added it from Bug 896950, please retry pushing now.

Comment 4

[Henry Chang [:hchang]]

Removed ~/.ssh/known_hosts and tried "ssh -vvv hg.mozilla.org" but got the same error message >"< Do I have to anything else or provide any other diagnostic log?

Comment 5

[Henry Chang [:hchang]]

Could anyone help? I still get error message like before. Thanks

Comment 6

[Shyam Mani [:fox2mike]]

can you paste the output of ssh -vv ?

I see the following on the server side :

Aug 19 18:41:45 hgssh1 sshd[32195]: Failed publickey for [e-mail]
Aug 19 18:58:55 hgssh1 sshd[8180]: Failed publickey for [e-mail]

Comment 7

[Henry Chang [:hchang]]

(In reply to Shyam Mani [:fox2mike] from comment #6)
> can you paste the output of ssh -vv ?
> 
> I see the following on the server side :
> 
> Aug 19 18:41:45 hgssh1 sshd[32195]: Failed publickey for [e-mail]
> Aug 19 18:58:55 hgssh1 sshd[8180]: Failed publickey for [e-mail]

Please find in the attachment. Thanks!

Comment 8

[Ashish Vijayaram [:ashish]]

If I try to verify your public key, it returns an error:

$ ssh-keygen -l -f hchang.pub 
key_from_blob: remaining bytes in key blob 268
key_read: type mismatch: encoding error
line 1 too long: ssh-rsa AAAAB4NzaC1yc2EAAAADAQABAAABAQDp...
hchang.pub is not a public key file.

Ideally it should print out something like this:

$ ssh-keygen -l -f ashish.pub
2048 03:95:09:4e:ea:e0:ef:59:fc:3c:e6:69:60:6c:48:8d  [e-mail] (RSA)

Can you generate a new public key and attach it to this bug? Thanks!

Comment 9

[Henry Chang [:hchang]]

Attachment: new pubkey

Comment 10

[Henry Chang [:hchang]]

(In reply to Ashish Vijayaram [:ashish] from comment #8)
> If I try to verify your public key, it returns an error:
> 
> $ ssh-keygen -l -f hchang.pub 
> key_from_blob: remaining bytes in key blob 268
> key_read: type mismatch: encoding error
> line 1 too long: ssh-rsa AAAAB4NzaC1yc2EAAAADAQABAAABAQDp...
> hchang.pub is not a public key file.
> 
> Ideally it should print out something like this:
> 
> $ ssh-keygen -l -f ashish.pub
> 2048 03:95:09:4e:ea:e0:ef:59:fc:3c:e6:69:60:6c:48:8d 
> [e-mail] (RSA)
> 
> Can you generate a new public key and attach it to this bug? Thanks!

I attached my new public key and it has been verified by "ssh-keygen -l -f".
Thanks.

Comment 11

[Ashish Vijayaram [:ashish]]

$ ssh-keygen -v -l -f hchang.pub
2048 12:92:fa:2b:a1:b0:dd:8d:3d:37:aa:44:8d:65:e8:bb  [e-mail] (RSA)
+--[ RSA 2048]----+
|                 |
|     o           |
|    + +          |
|   o * .         |
|  . + o S        |
|. .o . .         |
|.+ o++           |
|o o.oo+ o        |
|   .E..+ .       |
+-----------------+

Perfect! I've updated your key in LDAP, please give it about 30-40 mins for a puppet run. Thanks!

Comment 12

[Henry Chang [:hchang]]

Many thanks! I will try it out later on.

Comment 13

[Henry Chang [:hchang]]

Verified success! Thanks